Red Hat Security AdvisoryRHSA-2026:1236
kernel security update
Released 2026-01-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) kernel-64k-debug-devel-6.12.0-55.55.1.el10_0, kernel-64k-debug-devel-matched-6.12.0-55.55.1.el10_0, kernel-64k-devel-6.12.0-55.55.1.el10_0 +12
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) kernel-6.12.0-55.55.1.el10_0, kernel-64k-6.12.0-55.55.1.el10_0, kernel-64k-core-6.12.0-55.55.1.el10_0 +28
- Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) kernel-tools-libs-devel-6.12.0-55.55.1.el10_0, libperf-6.12.0-55.55.1.el10_0
- Red Hat Enterprise Linux Real Time EUS (v. 10.0) kernel-rt-6.12.0-55.55.1.el10_0, kernel-rt-64k-6.12.0-55.55.1.el10_0, kernel-rt-64k-core-6.12.0-55.55.1.el10_0 +21
- Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0) kernel-rt-6.12.0-55.55.1.el10_0, kernel-rt-core-6.12.0-55.55.1.el10_0, kernel-rt-debug-6.12.0-55.55.1.el10_0 +11
Fixes 7 records
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function from MIDI 1.0 to UMP packet contains an internal buffer to keep t…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00245 · Published 2025-05-19 · Partial fix · 6.6.90, 6.12.28 +2 CWE-120
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m_get_fwnode() is registered with the pci subsystem as pci_msi_g…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2025-05-08 · Partial fix · 5.4.294, 5.10.238 +6 CWE-416
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to access nla_len(ovs_key) if the data is smaller than the netlink…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00223 · Published 2025-05-01 · Partial fix · 5.4.293, 5.10.237 +6
Priority LOW 35
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix an out-of-bounds shift when invalidating TLB When the size of the range invalidated is larger than rounddown_pow_of_two(ULONG_MAX), The func…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0021 · Published 2025-05-01 · Partial fix · 6.12.25, 6.14.4 +1 CWE-125
Priority LOW 34
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE This data originates from userspace and is used in buffer offset calculations whi…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00254 · Published 2025-12-06 · Partial fix · 5.4.302, 5.10.247 +6
Priority LOW 31
In the Linux kernel, the following vulnerability has been resolved: mm/compaction: fix UBSAN shift-out-of-bounds warning syzkaller reported a UBSAN shift-out-of-bounds warning of (1UL << order) in isolate_freepages_block…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00193 · Published 2025-02-27 · Partial fix · 6.12.14, 6.13.3 +1 CWE-125
Priority LOW 24
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an…
CVSS — · EPSS 0.00211 · Published 2025-11-12 · Partial fix · 5.4.301, 5.10.246 +6
THREATIST.IORead the docs